修复 Microsoft Defender for Endpoint 中的不正常传感器Fix unhealthy sensors in Microsoft Defender for Endpoint

适用于:Applies to:

分类为错误配置或非活动的设备可能由于各种原因被标记。Devices that are categorized as misconfigured or inactive can be flagged due to varying causes. 本节提供了一些说明,说明可能导致设备被分类为非活动或错误配置的原因。This section provides some explanations as to what might have caused a device to be categorized as inactive or misconfigured.

非活动设备Inactive devices

非活动设备不一定由于问题而标记。An inactive device is not necessarily flagged due to an issue. 在设备上采取的以下操作可能导致设备被分类为非活动状态:The following actions taken on a device can cause a device to be categorized as inactive:

设备未在使用中Device is not in use

如果设备出于任何原因未使用七天以上,它将在门户中保持"非活动"状态。If the device has not been in use for more than seven days for any reason, it will remain in an ‘Inactive’ status in the portal.

已重新安装或重命名设备Device was reinstalled or renamed

重新安装或重命名的设备将在 Microsoft Defender 安全中心中生成一个新的设备实体。A reinstalled or renamed device will generate a new device entity in Microsoft Defender Security Center. 以前的设备实体在门户中将保持"非活动"状态。The previous device entity will remain with an ‘Inactive’ status in the portal. 如果重新安装了设备并部署了 Defender for Endpoint 程序包,请搜索新设备名称以验证设备是否正常报告。If you reinstalled a device and deployed the Defender for Endpoint package, search for the new device name to verify that the device is reporting normally.

设备已载出Device was offboarded

如果设备已载出,它仍将显示在设备列表中。If the device was offboarded, it will still appear in devices list. 七天后,设备运行状况应更改为非活动状态。After seven days, the device health state should change to inactive.

设备未发送信号Device is not sending signals

如果设备出于任何原因(包括属于错误配置设备分类的条件)未向任何 Microsoft Defender 终结点通道发送超过 7 天的信号,则设备可视为非活动状态。If the device is not sending any signals for more than seven days to any of the Microsoft Defender for Endpoint channels for any reason including conditions that fall under misconfigured devices classification, a device can be considered inactive.

你是否希望设备的状态为"活动"?Do you expect a device to be in ‘Active’ status? 打开支持票证Open a support ticket.

错误配置的设备Misconfigured devices

可以将错误配置的设备进一步分类为:Misconfigured devices can further be classified to:

  • 通信受损Impaired communications
  • 无传感器数据No sensor data

通信受损Impaired communications

此状态表示设备和服务之间的通信有限。This status indicates that there's limited communication between the device and the service.

以下建议操作可帮助修复与通信受损的错误配置设备相关的问题:The following suggested actions can help fix issues related to a misconfigured device with impaired communications:

如果采取更正操作,但设备状态仍配置错误, 请打开支持票证If you took corrective actions and the device status is still misconfigured, open a support ticket.

无传感器数据No sensor data

状态为"无传感器数据"的错误配置设备与服务通信,但只能报告部分传感器数据。A misconfigured device with status ‘No sensor data’ has communication with the service but can only report partial sensor data. 按照以下操作更正与状态为"无传感器数据"的错误配置设备相关的已知问题:Follow theses actions to correct known issues related to a misconfigured device with status ‘No sensor data’:

如果采取更正操作,但设备状态仍配置错误, 请打开支持票证If you took corrective actions and the device status is still misconfigured, open a support ticket.

另请参阅See also